MCP servers tagged sans-sift

4 live MCP servers tagged "sans-sift", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with sans-sift.

live servers

avg trust

Mulder

Agentic DFIR

Agentic Dart

Agentic-DART — autonomous detection & response agent. Architecture-first, not prompt-first. Starts as agentic DFIR; designed to expand toward agentic SOC and beyond.

Find Evil

Autonomous, audit-traced incident-response agent for the SANS SIFT Workstation. The agent has no shell — evidence tampering and hallucinated findings are architecturally impossibl…

Verdict

tejcodes-rex

VERDICT: an autonomous, read-only, self-correcting incident response analyst for the SANS SIFT Workstation. Custom MCP Server (pattern 2) + Claude Code. Find Evil hackathon.